Global Retailer Uses eControl to Enhance Novell Identity Manager

This retailer's distribution
network covers all major world markets, including both wholesale and
retail sectors. The company enjoys one of the largest and most efficient
networks in its industry, with approximately 5,500 stores
worldwide.

Overview

A leading global retailer has deployed eControl to enhance its Novell Identity Manager implementation. This retailer's distribution network covers all major world markets, including both wholesale and retail sectors. The company enjoys one of the largest and most efficient
networks in its industry, with approximately 5,500 stores worldwide.

They added eControl to their system to decrease the number of accounts with supervisor rights on their systems, to improve security and regulatory compliance, to deliver a complete audit log of all user account changes in Novell GroupWise and eDirectory, to manage extended eDirectory schema values and to enable junior administrators to perform a restricted set of user management tasks from a browser.

eControl fulfills these requirements without having to assign service desk operators and non-technical staff ANY Trustee Rights in eDirectory, GroupWise and the file system.

The Challenge

"Prior to installing eControl, we had to assign supervisor Trustee Rights to over 20 staff members to allow them to manage Novell GroupWise, eDirectory and our file systems. With over 70,000 user accounts in our identity management vault and 3,000 users in our production tree, having that number of people with supervisor rights was a significant security and audit challenge," said a spokesperson for the retailer.

"With high turnover in support staff, we needed a solution that would be easy to use and that would empower non-technical people to carry out user account management tasks securely with minimal training."

The Solution

The retailer implemented Omni eControl as the ideal complement to their Novell Identity Manager deployment because it delivered:

Improved security and regulatory compliance:
eControl allows you to completely lock down your security environment. eControl users require NO Trustee Assignments, NO permissions, NO access to the file system, NO System Access Rights and NO access to ConsoleOne, NWAdmin or iManager. Disabling and expiring accounts can be securely delegated to HR personnel or junior support staff. Administrators can enforce strong password policies and reduce the risk of regulatory exposure and security liability.

Complement to Novell Identity Manager: As changes are made in eControl, Novell Identity Manager synchronises the changes across the retailer's multiple systems.

The Results

"We received an immediate return on our eControl investement. We went from having over 20 administrators with various levels of supervisor Trustee Assignments in eDirectory, GroupWise and the file system to only two," said the company spokesperson.

"eControl has profoundly changed the way we manage our systems. eControl allows us to revise our account management processes to better reflect our business needs. We can now securely delegate account management tasks to non-technical staff without any security concerns. We can now generate audit logs of all user account management changes and provide granular user change reports."

"The initial installation took under two hours to complete. The technical support team at Omni was outstanding. Given the complexity of our systems, there were a number of modifications that were required. The Omni development team responded immediately to our enhancement
requests. I can't speak highly enough about our satisfaction with the eControl team."

"With eControl, administrators now use a single, easy-to-use, web-based tool, rather than a combination of ConsoleOne, NWAdmin and iManager. There are now only two senior administrators who have supervisor rights anywhere in our system. I am very pleased with the flexibility that
eControl provided to allow us to customise the interface and task assignments to meet our specific needs. Our eControl deployment has received enthusiastic support and appreciation from our senior management, audit and security departments and service desk staff."

"We highly recommend eControl as an ideal complement to Novell Identity Manager. eControl has helped our company deliver on its enterprise network mandate and management needs."

Wilfrid Laurier University's Help Desk uses eControl to manage their 13,500 Novell Groupwise accounts. "Our help desk operators, users and lab administrators are thrilled with the system. I strongly recommend eControl and Omni for all universities and colleges looking to
simplify their Novell GroupWise help desk user account administration."